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1 . An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview with 
Francis J. Maguire, reg. no. 31,391 on August 4, 2009. 

3. The claims have been amended as follows: 

a. Replace claim 1 to read as of the following: 

In Claim 1, 

1 . (Currently Amended) A method, comprising: 

sending an access-request signal comprising a well-known uniform resource locator to a 
network by a terminal for connecting to a help-portal server of said network and for requesting a 
provisioning signal or a management session signal for configuring the terminal; 

receiving by the terminal, in response to said sending the access-request signal, an 
identity of said help-portal server using a chain of trust comprising at least two consecutive 
exchanges of information between trusted elements of the network and the terminal; and 

re-sending, in response to said receiving said identity of said help-portal server, said 
access-request signal to the help-portal server by the terminal with a request to provide the 
provisioning signal or the management session signal to the terminal, wherein, after being 
configured using the provisioning signal or the management session signal, the terminal is 
enabled for handling data-protocol services and dynamically configured for the data-protocol 
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services specific to a service provider in a secure way based on said chain of trust so as to be able 
to connect said terminal to an IP backbone network via [[a]] said network, which provides said 
data-protocol services and which is provided by said service provider wherein identifying said 
help-portal server comprises: 

identifying to the terminal a trusted access point node name by a trusted home location 
register of the network; 

re-sending the access-request signal to the trusted access point node by the terminal; 

identifying to the terminal a trusted domain name service server of the network by the 
trusted access point node; 

re-sending said access-request signal by the terminal to the trusted domain name service 
server for identifying an address mapping for the help-portal server; and 

identifying said address mapping to the terminal by the trusted domain name service 

server. 

b. Replace claim 8 to read as of the following: 
In Claim 8, 

8. (Currently Amended) The method of claim 6, wherein said provisioning 
signal is sent over [[the]] air. 

c. Replace claim 10 to read as of the following: 



In Claim 10, 
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10. (Currently Amended) The method as in claim 1, wherein a security of configuring the 
terminal is ensured by means of the chain of trust built by the trusted home location register, by 
[[the]] a well-known access point node name for accessing the trusted access point node, by the 
trusted access point node, by the trusted domain name service server and by the well-known 
uniform resource locator. 

d. Replace claim 1 1 to read as of the following: 
In Claim 11, 

1 1 . (Currently Amended) The method of claim 1 , wherein after said sending the request 
signal to the help-portal server, the method further comprises: 

sending a user authentication request signal to an authentication block of the network or to the 
terminal or to both, the authentication block and the terminal, respectively, by the help-portal 
server, and [[a]] receiving authentication confirmation signal back from the authentication block 
or from the terminal, respectively, or from both, the authentication block and the terminal; and 
determining if the terminal is authentic by the help-portal server based on the authentication 
confirmation signals. 

e. Replace claim 13 to read as of the following: 
In Claim 13, 

1 3 . (Currently Amended) The method of claim 1 1 , wherein if it is determined that the 
terminal is authentic, the method further comprises: 

sending a triggering signal to a provisioning server by the help-portal server; and 
sending [[a]] the provisioning signal by the provisioning server to the terminal and so 
configuring said terminal. 
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f. Replace claim 17 to read as of the following: 
In Claim 17, 

17. (Currently Amended) The method Of claim 16, wherein if the further triggering signal 
contains the instruction for making the connection to the device management server by the 
terminal, the method further comprises: 

sending a start signal to a device management agent block of the terminal by [[the]] an 
initialization content handler block; 

sending a further access-request signal containing a network access authentication to the device 
development management server by the device management agent block; and 
sending the management session signal by the device development management server to the 
terminal for further configuring the terminal. 

g. Replace claim 19 to read as of the following: 
In Claim 19, 

19. (Currently Amended) A cellular communication system, comprising: 
a processor; 

a terminal, enabled for handling data-protocol services and dynamically 

configured for the data-protocol services specific to a service provider in a secure way based on a 
chain of trust, responsive to a provisioning signal or to a management session signal for 
configuring the terminal, for sending an access- request signal comprising a well-known uniform 
resource locator for connecting to a help-portal server, for re-sending, in response to identifying 
said help-portal server, 

said access-request signal to the help-portal server with a request to provide the provisioning 
signal or the management session signal to the terminal; and 
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a network provided by said service provider and comprising said help-portal server, responsive 
to the access-request signal, for providing the data-protocol services specific to the service 
provider, for said identifying, in response to said sending the access-request signal, said help- 
portal server to said terminal using said chain of trust comprising at least two consecutive 
exchanges of information between trusted elements of the network and the terminal, for 
providing the provisioning signal or the management session signal to the terminal to perform 
said configuring and for enabling after said configuring a connection of said terminal to an IP 
backbone network via the network, wherein said help-portal server of said network is responsive 
to the access- request signal and to one or both authentication confirmation signals, for providing 
a triggering signal, or an initial provisioning triggering signal and a further triggering signal; said 
network further comprises: 

a trusted domain name service server, responsive to the re-sending of the access-request 
signal from the terminal based on an identification of the trusted domain name service server 
provided by a trusted access point node , for identifying to the terminal an address mapping for 
the help- portal server; 

[[a]] the trusted access point node, responsive to the re-sending of the access-request 
signal based on an identification of the trusted access point node provided by a trusted home 
location register , for providing to the terminal the trusted domain name service server; 

[[a]] the trusted home location register, responsive to the access-request signal, for 
providing the trusted access point node to the terminal; and optionally 
an authentication block, responsive to an authentication request signal, for providing the one 
authentication confirmation signal to the help-portal server. 

h. Replace claim 24 to read as of the following: 
In Claim 24, 



24. 



(Currently Amended) The cellular communication system of claim 19, wherein a 
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security of configuring the terminal is ensured by means of the chain of trust built by the trusted 
home location register, by [[the]] a well-known access point node name for accessing the trusted 
access point node, and further built by the trusted access point node, by the trusted domain name 
service server and by the well-known uniform resource locator. 

i. Replace claim 28 to read as of the following: 
In Claim 28, 

28. (Currently Amended) The cellular communication system of claim 19, wherein the 
network further comprises: 

a device management server, responsive to said initial provisioning triggering signal, to a further 
access-request signal containing a network access authentication provided 
by the terminal in response to said further triggering signal, for providing the management 
session signal to the terminal for configuring the terminal. 

j. Replace claim 32 to read as of the following: 
In Claim 32, 

32. (Currently amended) The cellular communication system of claim 30, wherein said 
provisioning signal is sent over [[the]] air. 

k. Cancel claim 33 to read as of the following: 

33. (Canceled) 

1. Replace claim 36 to read as of the following: 
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In Claim 36, 

36. (Currently Amended) A terminal apparatus, comprising: 
a processor; 

a browser user agent block, for sending an access-request signal 

comprising a well-known uniform resource locator to a network for connecting to a help-portal 
server of said network, for re-sending, in response to identifying said help-portal server, said 
access-request signal to the help-portal server with a request to provide [[the]] a provisioning 
signal or [[the]] a management session signal to the terminal apparatus , 
wherein said terminal apparatus is configured to receive an identity of said help-portal server 
using a chain of trust comprising at least two consecutive exchanges of information between 
trusted elements of the network and the browser user agent block, wherein said trusted elements 
of the network comprise a trusted home location register, a trusted access point node, and a 
trusted domain name service server, and 

wherein, after being configured using the provisioning signal or the management session signal, 
the terminal apparatus is enabled for handling data- protocol services and dynamically 
configured for the data-protocol services specific to a service provider in a secure way based on 
said chain of trust so as to be able to connect said terminal to an IP backbone network via [[a]] 
the network, which is configured to provide said data-protocol services and which is provided by 
said service provider, wherein security of configuring the terminal apparatus is ensured by the 
chain of trust built by the trusted home location register, by a well-known access point node 
name provided by the trusted home location register to the terminal apparatus, and further built 
by the trusted access point node identifying to the terminal apparatus the trusted domain name 
service server in response to the re-sending of the access-request signal based on an 
identification of the trusted access point node provided by the trusted home location register and 
by the trusted domain name service center server providing a well known uniform resource 
locator an address mapping to the terminal apparatus for locating the help-portal server in 
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response to the re-sending of the access-request signal based on an identification of the trusted 
domain name service server provided by the trusted access point node . 

m. Replace claim 37 to read as of the following: 
In Claim 37, 

37. (Currently Amended) The terminal apparatus of claim 36, wherein said data-protocol 
services specific to said service provider are provided by a general packet radio service. 

n. Replace claim 38 to read as of the following: 

In Claim 38, 

38. (Currently Amended) A network, comprising: 
a processor; 

a help-portal server, for providing [[the]] data-protocol services specific to a 
service provider, responsive to re-sending of an access-request signal from a terminal for 
providing [[the]] a provisioning signal or [[the]] a management session signal to the terminal to 
perform dynamic configuring of said terminal for the data-protocol services specific to the 
service provider in a secure way based on a chain of trust so as to enable and for enabling after 
said configuring a connection of said terminal to an IP backbone network via the network, which 
is configured to provide said data-protocol services and which is provided by said service 
provider, wherein[[,]] the re-sending of the access-request signal is in response to said terminal 
sending said access-request signal comprising a well-known uniform resource locator for 
connecting to said help-portal server from a terminal of said network , the network is configured 
to identify said help-portal server to said terminal using [[a]] said chain of trust comprising at 
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least two consecutive exchanges of information between trusted elements of the network and the 
terminal, wherein said trusted elements of the network comprise: 

a trusted home location register, responsive to the access-request signal, for 
providing [[the]] a trusted access point node to the terminal, 

[[a]] the trusted access point node, responsive to the re-sending of the access-request 
signal based on an identification of the trusted access point node provided by the trusted home 
location register , for providing to the terminal [[the]] a trusted domain name service server; 

[[a]] the trusted domain name service server, responsive to the re-sending of the access- 
request signal from the terminal based on an identification of the trusted domain name service 
server provided by the trusted access point node , for identifying to the terminal an address 
mapping for the help-portal server. 

o. Replace claim 4 1 to read as of the following: 
In Claim 41, 

41 . (Currently Amended) The network of claim 38, wherein the help-portal server is 
configured to provide a triggering signal in response to said access- request signal, and said 
network comprises: 

a provisioning server, responsive to the triggering signal by the help-portal server, for providing 
the provisioning signal to the terminal. 



p. Replace claim 42 to read as of the following: 



In Claim 42, 
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42. (Currently Amended) The terminal apparatus of claim 36, wherein [[a]] the security of 
configuring the terminal apparatus is ensured by means of the chain of trust built by the trusted 
home location register, by the well-known access point node name for accessing the trusted 
access point node, and further built by the trusted access point node, by the trusted domain name 
service server and by the well-known uniform resource locator. 

q. Replace claim 43 to read as of the following: 
In Claim 43, 

43. (Currently Amended) The network of claim 38, wherein a security of configuring the 
terminal is ensured by means of the chain of trust built by the trusted home location register, by 
[[the]] a well-known access point node name for accessing the trusted access point node, and 
further built by the trusted access point node, by the trusted domain name service server and by 
the well-known uniform resource locator. 

r. Cancel claim 44 to read as of the following: 

44. (Canceled) 

Reason for Allowance 

The following is an examiner's statement of reasons for allowance: None of the prior arts of 
records teach or suggest in combination the claims in the examiner amendment above. 
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Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Philip C Lee whose telephone number is (571)272-3967. The examiner can 
normally be reached on 8 AM TO 5:30 PM Monday to Thursday and every other Friday. 



/Philip C Lee/ 

Primary Examiner, Art Unit 2448 



